Implement Strict Transport Security (HSTS)

[carterm]

Describe the bug
We should implement Strict Transport Security (HSTS) in order to prevent man-in-the-middle attacks where people specifying the HTTP address can be redirected to a malicious site.

More information here...
https://hstspreload.org/

To Reproduce

1. Open Chrome Developer Tools -> Network
2. In Chrome Browse to "http://alpha.ca.gov" (not HTTPS)
   First value for "alpha.ca.gov" shows the following

Request URL: http://alpha.ca.gov/
Request Method: GET
Status Code: 301 Moved Permanently (from disk cache)
Location: https://alpha.ca.gov/

Expected behavior
The browser should automatically go the the HTTPS site without triggering a redirect.

related to...
#13

[carterm]

Deployed...New result

Request URL: http://alpha.ca.gov/
Request Method: GET
Status Code: 307 Internal Redirect
Location: https://alpha.ca.gov/
Non-Authoritative-Reason: HSTS